Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TRfL9FhXjddTblwxDAZcVAgfZ60.roa
File: TRfL9FhXjddTblwxDAZcVAgfZ60.roa (raw, json)
Hash identifier: SqIlC1jVlOgO15BcuSiql7yOt+ba+9Xi8O7yp41qDWA=
Subject key identifier: 4D:17:CB:F4:58:57:8D:D7:53:6E:5C:31:0C:06:5C:54:08:1F:67:AD
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0BE9
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TRfL9FhXjddTblwxDAZcVAgfZ60.roa
Signing time: Tue 01 Apr 2025 01:47:43 +0000
ROA not before: Tue 01 Apr 2025 01:47:43 +0000
ROA not after: Sun 15 Mar 2026 01:30:03 +0000
asID: 9605
IP address blocks: 183.75.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3049 (0xbe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 1 01:47:43 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=4D17CBF458578DD7536E5C310C065C54081F67AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:32:c7:9d:51:c7:e9:88:3f:10:00:2a:87:83:
92:d9:a9:93:e5:46:54:a6:0a:63:5d:03:07:fd:7a:
4b:d2:0f:28:24:22:36:4b:15:79:ee:71:bb:e4:8e:
49:68:44:78:02:80:f6:e7:a0:f2:d5:c6:ef:4d:b3:
18:14:ad:44:80:60:49:5b:26:47:82:4b:f3:92:47:
ec:fe:33:d6:f8:de:89:34:e9:f6:9f:bd:ca:aa:1c:
1b:91:11:fb:fe:84:f8:ab:91:50:93:fe:ae:2c:fe:
0e:8e:b0:01:07:51:dc:39:4c:dc:19:bc:81:99:76:
9b:1c:22:09:4b:d0:e2:74:eb:06:a7:54:bf:a7:ad:
69:e5:c3:27:42:d0:d0:6f:f6:ff:e9:73:f4:80:79:
00:b3:26:fe:4b:ca:54:26:25:65:ce:bb:b5:e1:15:
7d:5d:a6:1d:22:07:06:1d:29:89:fd:e6:36:7a:98:
6b:5d:3e:63:8b:79:06:fa:ed:fd:6f:2d:66:67:77:
23:86:5b:52:df:96:dd:c8:08:d9:25:0b:39:22:e9:
c2:ad:9b:d2:f0:15:3e:68:71:ff:ec:57:2b:d2:03:
c3:3e:c6:d6:61:74:3d:8e:4f:35:83:a9:d9:6f:0c:
69:61:ed:0f:7b:f2:d9:48:c4:d2:04:79:27:e0:7a:
87:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:17:CB:F4:58:57:8D:D7:53:6E:5C:31:0C:06:5C:54:08:1F:67:AD
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TRfL9FhXjddTblwxDAZcVAgfZ60.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
183.75.236.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:1e:5b:87:d4:c9:d8:1b:12:c8:25:1d:d0:36:10:97:d3:fc:
bb:b4:73:bf:22:d1:8f:f1:96:94:49:91:40:0b:68:4d:24:e4:
38:07:ca:87:96:08:c3:bf:e5:e3:97:f5:b2:95:9a:23:f6:9c:
dd:5d:fc:e9:0b:fa:fa:3c:de:03:12:dc:07:96:df:c8:cb:3d:
2e:16:4b:76:62:74:64:11:47:3f:6a:37:09:bb:21:70:4f:3b:
4a:0a:d7:bb:7b:8b:50:a0:16:11:07:c9:98:e0:8e:4c:2f:e8:
4d:56:e4:f3:f8:cb:80:22:64:b5:a8:54:33:0a:c2:c6:25:ff:
6f:d1:6b:3f:7c:4b:d8:31:4a:6c:f9:ca:1f:ec:88:6f:d7:9c:
d8:de:25:ef:56:86:f6:6e:5e:4e:39:9d:9a:ae:71:d0:42:64:
9d:40:19:37:cd:a5:df:c5:95:8d:e6:73:ba:0a:c8:67:86:ae:
33:04:e9:0d:0c:25:65:17:4d:b8:b3:7d:cb:4a:68:cc:c2:4a:
c2:86:aa:59:10:7f:d6:cc:c4:eb:d5:f4:cd:cf:0e:61:0c:21:
34:a9:dc:83:a5:65:ed:64:e7:78:89:a0:1a:7c:9f:8b:29:00:
8f:31:35:9a:b1:85:c4:47:ac:82:82:7f:53:23:d4:50:78:51:
2a:66:d4:1b
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICC+kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA0MDEw
MTQ3NDNaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDREMTdDQkY0NTg1NzhE
RDc1MzZFNUMzMTBDMDY1QzU0MDgxRjY3QUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD4MsedUcfpiD8QACqHg5LZqZPlRlSmCmNdAwf9ekvSDygkIjZL
FXnucbvkjkloRHgCgPbnoPLVxu9NsxgUrUSAYElbJkeCS/OSR+z+M9b43ok06faf
vcqqHBuREfv+hPirkVCT/q4s/g6OsAEHUdw5TNwZvIGZdpscIglL0OJ06wanVL+n
rWnlwydC0NBv9v/pc/SAeQCzJv5LylQmJWXOu7XhFX1dph0iBwYdKYn95jZ6mGtd
PmOLeQb67f1vLWZndyOGW1Lflt3ICNklCzki6cKtm9LwFT5ocf/sVyvSA8M+xtZh
dD2OTzWDqdlvDGlh7Q978tlIxNIEeSfgeocJAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUTRfL9FhXjddTblwxDAZcVAgfZ60wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1RSZkw5RmhYamRkVGJsd3hEQVpjVkFnZlo2MC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC3S+wwDQYJKoZIhvcNAQELBQADggEBADseW4fUydgbEsglHdA2EJfT/Lu0
c78i0Y/xlpRJkUALaE0k5DgHyoeWCMO/5eOX9bKVmiP2nN1d/OkL+vo83gMS3AeW
38jLPS4WS3ZidGQRRz9qNwm7IXBPO0oK17t7i1CgFhEHyZjgjkwv6E1W5PP4y4Ai
ZLWoVDMKwsYl/2/Raz98S9gxSmz5yh/siG/XnNjeJe9WhvZuXk45nZqucdBCZJ1A
GTfNpd/FlY3mc7oKyGeGrjME6Q0MJWUXTbizfctKaMzCSsKGqlkQf9bMxOvV9M3P
DmEMITSp3IOlZe1k53iJoBp8n4spAI8xNZqxhcRHrIKCf1Mj1FB4USpm1Bs=
-----END CERTIFICATE-----
Generated at Mon Apr 14 11:43:01 2025 by rpki-client